vendor:
Free Image Hosting
by:
Kacper (a.k.a Rahim)
7,5
CVSS
HIGH
Remote File Include
98
CWE
Product Name: Free Image Hosting
Affected Version From: 1.0
Affected Version To: 1.0
Patch Exists: YES
Related CWE: N/A
CPE: a:free-php-scripts.net:free_image_hosting:1.0
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2006
Free Image Hosting <= 1.0 (forgot_pass.php) Remote File Include Exploit
A vulnerability in Free Image Hosting version 1.0 (forgot_pass.php) allows remote attackers to include arbitrary files via a URL in the 'include_path' parameter.
Mitigation:
The vendor has released a patch to address this vulnerability.